Multinational Company Based In France Hit With A Ransomware Attack

Scheider Electric, a multinational energy management and automation company based in France was hit with a ransomware attack on January 17th. According to BleepingComputer, “terabytes of corporate data” from the company’s Sustainability Business division was stolen. 

If Scheider elects not to pay the ransom, sensitive data concerning customers’ compliance with environmental and energy regulations, power utilization, and industrial control and automation systems could potentially be leaked.

Schneider’s Resource Advisor cloud platform experienced disruptions and continued to suffer outages as of January 29, as reported by BleepingComputer. The Cactus ransomware gang was responsible for the attack and is threatening to release the stolen data unless their extortion demands are met. 

Schneider has a workforce of over 150,000 people worldwide and is expected to release its full financial results for 2023 in March. As of September, the company reported revenue of $28.5 billion and produces a wide range of energy and automation products, including household electrical components and industrial control and building automation devices. 

Its brands include APC, which manufactures uninterruptible power supply devices, and Homeline and Square D. In 2023, Schneider was targeted in the MOVEit data theft attacks by the Clop ransomware gang, which impacted over 2,700 companies. 

The specific data that was stolen during the recent attack is unknown, but Schneider provides consulting services on renewable energy solutions and helps companies comply with complex climate regulatory requirements globally. Its Sustainability Business division consults with many well-known U.S.-based companies, including Walmart, Hilton, Lexmark, PepsiCo, Allegiant Travel, Clorox, DHL, and DuPont.